fatihgo.
EnglishTürkçeContact

Revoke

Revoke — Privacy Policy

Last updated: 4 October 2026 · Version 1.3

Data Controller

The Revoke app is developed by Fatih Kunak. Contact: fatih.kunak@gmail.com.

Summary

Revoke has no accounts, never asks for bank credentials and never connects to a bank. The subscription data you enter is stored only on your device, encrypted; the developer runs no server and never sees this data.

Personal Data Processed

Revoke processes only data needed to track subscriptions and recurring spending:

  • Vendor/service name, amount, currency, billing cycle, renewal date, trial end date (entered manually, pasted from a receipt, or photographed).
  • Reminder preference (days before renewal), language and usage-mode preference.
  • For company (B2B) use (optional): responsible employee name/email, department, seat counts, contract/cancellation details — stored only on your device.
  • If you use the AI Money Coach (optional): your own API key — stored only on your device, encrypted.

No identity, bank/financial account details, location, contacts or gallery data is collected.

Data That Leaves Your Device

By default your data never leaves your device. Data is sent off-device only in these cases:

  1. AI Money Coach (optional, initiated by you): when you tap “Get insight”, a summary of your active subscriptions (vendor name, amount, currency, cycle, trial end, monthly total, number of cancellations) and your question are sent over HTTPS to the provider you choose (OpenAI, Anthropic or Google) using your own API key. Company fields (employee name/email, etc.) are not sent. This data never passes through our servers; the provider’s own privacy policy applies.
  2. Google ML Kit (receipt photo reading): text recognition runs entirely on your device; photos and text are not sent. To operate and improve the service, the ML Kit library sends Google device information (manufacturer, model, OS version), the app package name and version, a per-installation identifier, performance metrics and error codes (over HTTPS). Details: https://developers.google.com/ml-kit/android-data-disclosure
  3. Google Play (purchases): Premium or Team purchases are processed by Google Play; your payment details never reach us. Google’s privacy policy applies.

Camera

The camera is used only when you choose “Take photo”, to read a receipt. The photo is processed on your device, never stored and never sent.

  • Purpose: app functionality (local calculation, reminders, savings tracking, encrypted backup, optional AI suggestions, receipt reading).
  • Legal basis: performance of a contract (Art. 6(1)(b)), your consent for optional features such as the AI Coach (Art. 6(1)(a)), and legitimate interest for SDK diagnostics (Art. 6(1)(f)).
  • International transfers: if you use the AI Coach, the summary is transferred at your request to the provider you choose, which may be located outside your country; ML Kit data goes to Google.

Security

  • All subscription data is stored on-device, encrypted with AES-256 (SQLCipher); the key is kept in Android Keystore-backed secure storage.
  • Backup files are encrypted with AES-256-CBC + PBKDF2 (100,000 iterations, random salt/IV) using a password you set.
  • Android automatic cloud backup does not include the subscription database.

Retention and Deletion

Data stays on your device until you delete it. For summaries sent to an AI provider, that provider’s retention policy applies.

Deleting your data (Revoke — Fatih Kunak):

  1. Open Revoke → Settings tab.
  2. Under Privacy & data, tap Delete all my data and confirm.

Deleted: all subscription records, savings records, departments and your saved AI API key — permanently and immediately, from your device. Kept: only your language, reminder lead time and usage-mode preferences (not personal data). To delete a single entry, open it → Delete. Uninstalling the app also deletes all local data. The developer stores none of your data on any server, so there is nothing else to delete; questions: fatih.kunak@gmail.com.

Your Rights (GDPR Art. 15–22)

Access, rectification, erasure, restriction, portability and objection. Because your data is on your device, you can exercise most of these directly in the app (view / edit / delete / export); for anything else, contact us.

Children

Revoke is intended for adults aged 18 and older. We do not knowingly collect personal data from anyone under 18.

Changes

If this policy changes, this page is updated; material changes are announced in the app.

Contact

fatih.kunak@gmail.com